Platform Security Engineer (SAST, DAST, Container Security) for NATO with security clearance

Wlgroup; Brunssum; On-site; EUR 90,000 - 130,000; Full time

Job summary

Wlgroup in Brunssum, Netherlands, is seeking a senior DevSecOps engineer to design and run secure on-prem pipelines behind new comms and information systems. You will own CI/CD, IaC, and platform automation in a strictly secure by default environment.

You will implement Docker and Kubernetes workloads, integrate SAST/DAST, secrets, and vulnerability management, and produce deployment docs and security artefacts for handover.

Qualifications

• 5+ years in DevSecOps or related roles.
• Experience with on-prem security-focused pipelines.
• Strong knowledge of CI/CD security testing.
• Experience with IaC and automation.
• Experience with Docker/Kubernetes and monitoring stacks.

Responsibilities

• Designing, building and maintaining CI/CD pipelines with security testing built in
• Developing Infrastructure as Code and automating provisioning, configuration and deployment
• Deploying and supporting containerised services on Docker and Kubernetes
• Running SAST, DAST and dependency scanning, secrets management and vulnerability management
• Setting up monitoring, logging and observability
• Writing deployment procedures, architecture diagrams, security artefacts and handover documentation

Skills

5+ years DevSecOps

GitLab

Jenkins

Azure DevOps

Terraform

Ansible

Puppet

Python

Bash

PowerShell

Docker

Kubernetes

Container security

Image management

Linux

Windows Server

Virtualisation

Prometheus

Grafana

Elastic

Education

Bachelor's degree in computing, software engineering or cybersecurity

CKA

Terraform Associate

DCA

Security+

GSEC

ISC2 CC

Job description

Security built into the pipeline, not bolted on at the end.

A multinational defence organisation in Brunssum is delivering new communication and information systems and needs a senior DevSecOps engineer to design and run the pipelines, automation and platforms behind them, all on-premises and all secure by default.

What you would be doing

• Designing, building and maintaining CI/CD pipelines with security testing built in
• Developing Infrastructure as Code and automating provisioning, configuration and deployment
• Deploying and supporting containerised services on Docker and Kubernetes
• Running SAST, DAST and dependency scanning, secrets management and vulnerability management
• Setting up monitoring, logging and observability
• Writing deployment procedures, architecture diagrams, security artefacts and handover documentation

What you would bring

• A degree in computing, software engineering or cybersecurity, or equivalent experience
• 5 years in DevSecOps, DevOps, platform engineering or infrastructure automation
• GitLab, Jenkins or Azure DevOps, plus Terraform, Ansible or Puppet and Python, Bash or PowerShell
• Docker and Kubernetes, container security and image management
• Linux and Windows Server, virtualisation, and tools such as Prometheus, Grafana or Elastic
• At least one of CKA, Terraform Associate or DCA, and one security certification such as Security+, GSEC or ISC2 CC

Why this one is worth a look

Modern engineering in a secure on-premises setting, where good automation makes a visible difference from day one.